Re: [rsyslog] a FAQ entry on rsyslog+sec

2013-06-28 Thread Risto Vaarandi
On 06/28/2013 09:53 AM, Rainer Gerhards wrote: On Thu, Jun 27, 2013 at 5:42 PM, Risto Vaarandiwrote: hi all, today, sec-2.7.4 was released, congrats to the new release! and for the new version there is also a FAQ entry on rsyslog integration: http://simple-evcorr.**sourceforge.net/FAQ.htm

Re: [rsyslog] a FAQ entry on rsyslog+sec

2013-06-28 Thread David Lang
On Fri, 28 Jun 2013, Rainer Gerhards wrote: It is kind of a short and does not cover yet the latest v7 additions, but hopefully it is able to explain the basics. I think talking about v5 makes a lot of sense, as this is what most distros have. But another thought: given the fact that SEC and

Re: [rsyslog] a FAQ entry on rsyslog+sec

2013-06-27 Thread Rainer Gerhards
On Thu, Jun 27, 2013 at 5:42 PM, Risto Vaarandi wrote: > hi all, > today, sec-2.7.4 was released, congrats to the new release! > and for the new version there is also a FAQ entry on rsyslog integration: > http://simple-evcorr.**sourceforge.net/FAQ.html#2

Re: [rsyslog] a FAQ entry on rsyslog+sec

2013-06-27 Thread Rainer Gerhards
On Fri, Jun 28, 2013 at 4:40 AM, David Lang wrote: > the new versions support the old syntax, but there are things you can do > with the new syntax that you can't do with the old. > > that's an important rsyslog policy: we will try very hard not to break any existing configs. So whatever worked,

Re: [rsyslog] a FAQ entry on rsyslog+sec

2013-06-27 Thread Risto Vaarandi
On 06/28/2013 03:38 AM, Orangepeel Beef wrote: yeah and of course they changed the syntax recently :) http://www.rsyslog.com/doc/omprog.html fortunately, in the FAQ entry both cases can be covered. kind regards, risto On Thu, Jun 27, 2013 at 8:42 AM, Risto Vaarandiwrote: hi all, today,

Re: [rsyslog] a FAQ entry on rsyslog+sec

2013-06-27 Thread David Lang
the new versions support the old syntax, but there are things you can do with the new syntax that you can't do with the old. David Lang On Thu, 27 Jun 2013, Orangepeel Beef wrote: yeah and of course they changed the syntax recently :) http://www.rsyslog.com/doc/omprog.html On Thu, Jun 27

Re: [rsyslog] a FAQ entry on rsyslog+sec

2013-06-27 Thread Orangepeel Beef
yeah and of course they changed the syntax recently :) http://www.rsyslog.com/doc/omprog.html On Thu, Jun 27, 2013 at 8:42 AM, Risto Vaarandi wrote: > hi all, > today, sec-2.7.4 was released, and for the new version there is also a FAQ > entry on rsyslog integration: http://simple-evcorr.** >

[rsyslog] a FAQ entry on rsyslog+sec

2013-06-27 Thread Risto Vaarandi
hi all, today, sec-2.7.4 was released, and for the new version there is also a FAQ entry on rsyslog integration: http://simple-evcorr.sourceforge.net/FAQ.html#2 It is kind of a short and does not cover yet the latest v7 additions, but hopefully it is able to explain the basics. kind regards,